1136
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 19 Mar 2025
1136 points (100.0% liked)
Selfhosted
45028 readers
294 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
It's not that hard to get a reverse proxy up, get a free DDNS, and a SSL certificate from let's encrypt.
https://www.linuxserver.io/blog/2020-08-21-introducing-swag
This is a pretty solid one stop shop for handling all reverse proxy with SSL certificate generation and renewal for jellyfin and other applications like sonarr, radarr, transmission, ombi and lists of others that are pretty much drag and drop configuration files if you're not mucking with the application's default ports.
That exposes Jellyfin to the internet, so it's not the same feature
And somehow you think that Plex isn't exposing your server to the Internet for streaming while not on your local network?
Okay there Mr. Madison.
It's not, not directly at least, and that's what everyone is ignoring here. You probably understand the value on Authelia/Authentik but you're failing to see that the Plex relay server is taking that same mantle here, so even if someone managed to compromise the relay server it's still not on your home server, whereas exposing jellyfin directly to the internet only requires one service to be compromised.
My dude if you are connecting from outside your local network you are "exposed" to the Internet in some way. What magic are you thinking Plex is doing? Is someone hand deliverying the packets via USPS?
Plex runs relay servers where your Plex server will connect to the relay and your player will also connect to the relay, making both ends of the connection egress type as far as routing and access control goes. https://support.plex.tv/articles/216766168-accessing-a-server-through-relay/
It's optional and likely not everyone uses it, but this provides a way for Plex to do remote streaming without the Plex server being reachable directly from the internet.
Separately, it costs money for Plex to run.
In some way is different from directly, on Plex you're behind a relay server so it's akin to being behind a VPS running Authentik/Authelia in front of the service on your home. Compromising the relay server does not necessarily compromises your home server, so it's not direct like putting Jellyfin on a reverse Proxy would be.